Description

An unauthenticated command injection vulnerability was identified in the GMS Dispatcher Service in GMS 9.5.1 and earlier versions which allows remote attacker to perform remote code execution through specially crafted requests.

Executive Summary

Technical Details

Mitigations

References

Additional Metadata

{
  "score": "9.4",
  "pubDate": "2026-08-11T21:17:49.173Z",
  "pubdate": "2026-08-11T21:17:49.173Z",
  "executiveSummary": "An unauthenticated command injection vulnerability has been identified within the GMS Dispatcher Service of GMS 9.5.1 and earlier versions. This critical security flaw enables remote attackers to achieve arbitrary remote code execution on the underlying host system by transmitting specially crafted requests to the targeted service. The vulnerability exposes enterprise infrastructure to severe compromise, as successful exploitation bypasses standard security controls without requiring prior user authentication or administrative privileges.\nThe primary risk implication involves complete system takeover, unauthorized access to sensitive operational data, and potential lateral movement across connected network segments. The attack vector is remotely exploitable over the network, drastically increasing the attack surface for external threat actors. Mitigation requires immediate vendor patch application or restricting network access to the vulnerable service until remediation is available.",
  "technicalDetails": "The vulnerability resides in the GMS Dispatcher Service component of GMS 9.5.1 and earlier versions, specifically stemming from insufficient input validation and sanitization procedures applied to incoming parameters before they are processed by the underlying operating system shell.\nRoot Cause: The application improperly handles user-supplied input within the GMS Dispatcher Service, allowing shell metacharacters or command separators to be interpreted and executed by the system interpreter.\nAttack Flow and Exploitation Method: An unauthenticated remote attacker crafts a malicious payload containing system commands and transmits it via a specially constructed request targeting the vulnerable network service. Upon receipt, the GMS Dispatcher Service parses the request and passes the unsanitized input parameters directly to a system shell or command execution function. The operating system subsequently executes the embedded commands with the privilege level of the running service account.\nAuthentication and Privileges: The vulnerability requires no authentication credentials and can be exploited by any remote attacker with network connectivity to the GMS Dispatcher Service.\nNetwork Exposure and Payload Behavior: The affected service listens for incoming network connections, exposing the flaw remotely. The payload executes arbitrary operating system commands, enabling attackers to deploy malicious binaries, establish reverse shells, manipulate system configurations, or exfiltrate sensitive data post-exploitation."
}